Security Incidents mailing list archives

Re: Port 1234 UDP traffic increase?


From: Steve Barnet <barnet () icecube wisc edu>
Date: Thu, 20 Dec 2007 09:29:30 -0600

Dude VanWinkle wrote:

[...]

I think what I will take away from this is that while the last time I
was watching this much traffic, viruses were noisy and big. 

Perhaps the better take away is that categorizing traffic by
proto/port is a pretty broad cut and to really know what's up
you have to do exactly what you did: get your hands dirty and
look at those bits.

This has been a good reminder.

Best,

---Steve

-- 
Steve Barnet
UW IceCube

Orange Alert: We believe that parties unnamed will attack
places not specified with weapons unknown at some point in
the future.



Current thread: